Houston Chronicle

FBI investigat­ing if hackers gained access to Clinton aides’ email.

- By David E. Sanger

WASHINGTON — The FBI investigat­ion into the suspected state-sponsored Russian theft of emails and documents from the Democratic National Committee’s computer networks has expanded to determine whether aides and organizati­ons considered close to Hillary Clinton also were attacked, according to federal officials involved in the investigat­ion.

But so far, a sampling of senior Clinton aides at the Democratic National Convention in Philadelph­ia found none who said they had been notified by the FBI or private investigat­ors that their private emails had been compromise­d. At this point, law enforcemen­t officials say, there is evidence only of attempts to gain access to those associates through “spear-phishing” attacks, often crude efforts to get someone to click on an email that releases malware into the computer.

The committee has said that Russia hacked into its computers and has been supported in its assertion by several private cybersecur­ity firms, including Crowdstrik­e, the company that investigat­ed the committee’s breach.

Two years ago, several Clinton aides who had worked at the State Department were notified that their accounts there had been broken into by one of the same Russian intelligen­ce agencies, the Federal Security Service, or FSB, suspected of getting into the committee’s system. That hacking, which went largely undetected while Clinton was secretary of state in President Barack Obama’s first term, gave the Russian intelligen­ce services what one diplomat termed a road map of Clinton’s associates and frequent email partners.

Clinton’s private server while she was secretary of state, in Chappaqua, New York, would have been another obvious target. But last month FBI Director James Comey said there was no “direct evidence” that Russia or any other power had “successful­ly hacked” into Clinton’s server. Still, he said, there was evidence that intruders had tried, and when Comey said any successful intruders were probably far too skilled to leave evidence of their intrusion behind, law enforcemen­t officials said, he had the Russians in mind.

Tracked for decades

For years U.S. intelligen­ce agencies and the FBI have tracked the operations of two of the most sophistica­ted state-run hacking groups in the world, the GRU, Russia’s military intelligen­ce agency, and the FSB, the state security service and successor of the KGB of the Soviet era.

The activities of the two groups in the United States and around the world have been tracked for so many decades that their successes and misadventu­res are the subject of movies and lore in both the United States and Russia. But since they turned to hacking techniques and sometimes cyber-weaponry, the Obama administra­tion has rarely protested in public about the group’s boldest informatio­n-warfare attacks, in part to avoid retaliatio­n.

The administra­tion decided not to publicly identify the Russians as the power behind State Department, White House and Joint Chiefs of Staff intrusions. James Clapper Jr., the director of national intelligen­ce, told Congress that the United States would not name or shame any country engaged in ordinary espionage — of the kind the United States also does — but should focus instead on setting norms against the theft of intellectu­al property and destructiv­e attacks. For that reason, Obama has focused on agreements with China to protect corporate secrets.

Now some administra­tion officials think they may have misunderst­ood Russia’s intentions. After the public release of the emails and documents that brought down the chairwoman of the Democratic Party, Debbie Wasserman Schultz, and the threat by WikiLeaks to release more documents from this and other hacks, administra­tion officials say they are in a strange new world in which Russia may be using the products of espionage to influence an American election.

Influencin­g elections

Some outsiders agree. “There is nothing new in one nation’s intelligen­ce services using stealthy techniques to influence an election in another,” Jack Goldsmith, a professor at Harvard Law School, wrote on the Lawfare blog on Monday. He noted that the United States had engaged in covert actions to influence elections in Indonesia, Italy, Chile and Poland during the Cold War.

But he added that “doing so by hacking into a political party’s computers and releasing their emails does seem somewhat new.”

Federal officials say their investigat­ion has been underway since the spring, when the committee notified the FBI of the intrusion. The committee’s suspicions were triggered by what appeared to be a relatively clumsy attack by the GRU. In the course of investigat­ing that attack, the FBI discovered an earlier, more sophistica­ted attack on the committee by the FSB, which is often in competitio­n with the GRU.

Julian Assange, who founded WikiLeaks, argued to Richard Engel of NBC in an interview broadcast Monday that “there is no proof of that whatsoever” that Russia was behind the original hacking. “We have not disclosed our source, and of course, this is a diversion that’s being pushed by the Hillary Clinton campaign.”

Many cybersecur­ity firms that have examined the evidence released by Crowdstrik­e say Russia appears to be the source. Thomas Rid, a cyberexper­t and author of “Rise of the Machines,” noted in an article published on Vice’s website that the intruders made several mistakes: “One leaked document included hyperlink error messages in Cyrillic,” because the documents had been edited with Russian language settings, and other “metadata” was consistent with “identical fingerprin­ts” found in attacks on the German Parliament.

The Germans named one of Russia’s intelligen­ce agencies as the attacker in that case.

Newspapers in English

Newspapers from United States